commit 536b33349c483e3cdb54cc926faba678f405be82
author William Roberts <william.c.roberts@intel.com> Tue Mar 01 10:53:29 2016 -0800
committer Nick Kralevich <nnk@google.com> Tue Apr 05 16:44:40 2016 +0000
tree 497450fd523e570530db903010456a055a15bb17
parent 5507fa6672455ce3331a099f48a2977dd084b63d

init: keep init out of system_app sandboxes

Change-Id: Idaf59ab51f7873d4d75969c5f4e62b5fbf608ef5
Signed-off-by: William Roberts <william.c.roberts@intel.com>

init.te

diff --git a/init.te b/init.te
index 1b99e90..747f771 100644
--- a/init.te
+++ b/init.te
@@ -104,6 +104,7 @@
   -system_file
   -exec_type
   -app_data_file
+  -system_app_data_file
 }:dir { create search getattr open read setattr ioctl };
 
 allow init {
@@ -112,6 +113,7 @@
   -exec_type
   -keystore_data_file
   -app_data_file
+  -system_app_data_file
   -shell_data_file
   -vold_data_file
   -misc_logd_file
@@ -123,6 +125,7 @@
   -exec_type
   -keystore_data_file
   -app_data_file
+  -system_app_data_file
   -shell_data_file
   -vold_data_file
   -misc_logd_file
@@ -134,6 +137,7 @@
   -exec_type
   -keystore_data_file
   -app_data_file
+  -system_app_data_file
   -shell_data_file
   -vold_data_file
   -misc_logd_file
@@ -145,6 +149,7 @@
   -exec_type
   -keystore_data_file
   -app_data_file
+  -system_app_data_file
   -shell_data_file
   -vold_data_file
   -misc_logd_file